p-video-avatar
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
beltcommand-line utility to interface with the Pruna P-Video-Avatar and P-Image models. Theallowed-toolsfrontmatter correctly limits command execution to thebelttool, reducing the risk of arbitrary command execution. - [EXTERNAL_DOWNLOADS]: The instructions reference a remote installation guide (
cli-install.md) and a Node.js package (belt-sh/cli) associated with theinference-shplatform. These are documented as functional dependencies for the integrated service. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external inputs such as user-provided text scripts and remote media URLs, which represents a potential injection surface.
- Ingestion points: The
voice_script,image, andaudioparameters inSKILL.mdaccept external content intended for video generation. - Boundary markers: External inputs are encapsulated within JSON payloads passed to the CLI tool.
- Capability inventory: The skill has access to shell execution via the restricted
beltcommand. - Sanitization: The instructions do not specify explicit sanitization steps, as filtering is expected to be handled by the underlying service.
Audit Metadata